Facesoma (“Facesoma,” “we,” “our,” or “us”) builds and operates a data-driven facial beauty analysis service. We believe your face is one of the most personal things you have. This policy explains, in plain language, exactly what we collect, what we do with it, and what we don't do with it.
1. The short version
- We do not store your photos. They are processed in memory and discarded immediately after analysis.
- We do not sell your data. Not to advertisers, not to data brokers, not to anyone.
- We do not train our models on your uploads. Our training data is licensed and anonymized; user uploads are excluded.
- Your reports stay in your browser. We don't keep server-side copies. If you download a PDF, that copy is yours alone.
2. Information we collect
Photos you upload
When you upload a photo, it is transmitted over an encrypted (HTTPS) connection to our analysis pipeline. The photo is held in memory only for as long as it takes to compute your report (typically under eight seconds) and is then immediately discarded. It is never written to persistent storage on our servers.
Analysis output
The numerical scores, written verdicts, and recommendations generated for your report exist in your browser session only. We do not retain a server-side copy. If you refresh the page, that report is gone unless you exported a PDF.
Technical data
Like virtually every website on the internet, our servers log basic technical information for security and reliability: IP address, browser type, request timestamps, and error logs. These logs are retained for up to 30 days and are not linked to your photo or report.
3. Third-party processing
To generate your report we transmit your photo to a third-party vision model (currently OpenAI) under a no-training, no-retention agreement. Per that agreement, the third party does not retain your photo and does not use it for model training. By using Facesoma you consent to this transmission.
4. Cookies and local storage
5. Your rights
Because we don't store photos or reports server-side, there is generally nothing for us to delete on your behalf. Clearing your browser cache is enough. Where applicable law (e.g., GDPR, CCPA) grants you additional rights such as access, rectification, or erasure of any incidental technical logs, you may exercise them by emailing the address below. We will respond within 30 days.
- Right of access
- Right to rectification
- Right to erasure
- Right to restrict processing
- Right to data portability
- Right to object
- Right to lodge a complaint with a supervisory authority
6. Children
Facesoma is not directed at children under 16. If we become aware that a child under 16 has used the service, we will not retain any associated data. Parents or guardians who believe their child has used Facesoma may contact us.
7. Security
We use industry-standard practices to protect data in transit and at rest: TLS 1.3 for all network traffic, strict access controls on production infrastructure, and routine security audits. No system is perfectly secure, but we treat your data with the seriousness it deserves.
8. International transfers
Our infrastructure is hosted on globally-distributed cloud providers. If you use Facesoma from outside the United States, your data (limited to the technical data described above) may be processed in the U.S. or other regions. Transfers occur under standard contractual clauses where required.
9. Changes to this policy
If we materially change this policy, we will update the “Last updated” date at the top and, where appropriate, notify users via a prominent banner. Continued use of Facesoma after changes constitutes acceptance.
10. Contact
Questions, requests, or complaints? Email privacy@facesoma.com. We read every message.